CVE-2018-3728

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-02-2018 01:00

Last modified: - 15-02-2018 01:00

Total changes: - 18

Description

CVE-2018-3728 hoek: Prototype pollution in utilities function

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

High

Attack complexity

Local

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

2.9

Base score

Exploitability score

Impact score

Verification logic

OR

AND

product=fh-system-dump-tool-0 AND versionEndExcluding=1.0.0-5.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=fping-0 AND versionEndExcluding=3.10-4.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=nagios-0 AND versionEndExcluding=4.0.8-8.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=nagios-plugins-0 AND versionEndExcluding=2.0.3-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Crypt-CBC-0 AND versionEndExcluding=2.33-2.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Crypt-DES-0 AND versionEndExcluding=2.05-20.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Net-SNMP-0 AND versionEndExcluding=6.0.1-7.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=phantomjs-0 AND versionEndExcluding=1.9.7-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=python-meld3-0 AND versionEndExcluding=0.6.10-1.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=qstat-0 AND versionEndExcluding=2.11-13.20080912svn311.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=radiusclient-ng-0 AND versionEndExcluding=0.5.6-9.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=redis-0 AND versionEndExcluding=2.8.21-2.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap-fh-openshift-templates-0 AND versionEndExcluding=4.6.0-5.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap-mod_authnz_external-0 AND versionEndExcluding=3.3.1-7.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=sendEmail-0 AND versionEndExcluding=1.56-2.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=ssmtp-0 AND versionEndExcluding=2.64-14.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=supervisor-0 AND versionEndExcluding=3.1.3-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-aaa AND versionEndExcluding=1.1.3-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-appstore AND versionEndExcluding=2.1.2-3

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-mbaas AND versionEndExcluding=6.0.3-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-messaging AND versionEndExcluding=3.2.0-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-metrics AND versionEndExcluding=3.2.0-5

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-ngui AND versionEndExcluding=5.19.3-1

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-scm AND versionEndExcluding=1.1.4-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-sdks AND versionEndExcluding=1.0.0-36

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-statsd AND versionEndExcluding=2.1.3-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-supercore AND versionEndExcluding=5.0.10-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/gitlab-shell AND versionEndExcluding=2.1.2-16

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/httpd AND versionEndExcluding=2.4-47

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/installer AND versionEndExcluding=1.0.0-42

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/memcached AND versionEndExcluding=1.4.15-32

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/millicore AND versionEndExcluding=7.55.0-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/mongodb AND versionEndExcluding=3.2-36

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/mysql AND versionEndExcluding=5.5-28

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/nagios AND versionEndExcluding=4.0.8-58

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/redis AND versionEndExcluding=2.8.21-40

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/ups-eap AND versionEndExcluding=1.1.4-35

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/wildcard-proxy AND versionEndExcluding=1.0.0-17

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=quay/quay-rhel8 AND versionEndExcluding=v3.6.0-62

vendor=Red Hat Enterprise Linux AND product=quay AND version=3

AND

product=nodejs-hoek AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=8

AND

product=nodejs-hoek AND version=

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3

AND

product=rh-nodejs4-nodejs-hoek AND version=

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=3

AND

product=rh-nodejs6-nodejs-hoek AND version=

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=3

Reference

Keywords

REDHAT

CVE-2018-3728

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.